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Amendment to flife aahna; 

This listing of the claims will replace all prior versions and listings of claims in the 
application. Claims 1, 4, 6-7, 10, 12-14. 16, 18-19, 2), 23, 26. 28-30, and 32 are amended herein. 
Claims 5, 1 1 , 1 5, 1 7, 20, 22, 27, 3 1 , and 33 are herein canceled withoxit prejudice. New claims 
34-42 are presented herein. Claims 1-4, 6-10, 12-14, 16, 18-19. 21, 23-26, 28-30, 32, and 34-42 
remain pending in the application. 

Listing of the Claiwis= 

1 . (Cnirently Amended) A method performed by a user terminal of a wireless access 
network, the method comprising: 

scrambling a user terminal certificate using a first TX3rtion of a shared secret to be known 
only by the user terminal and an access point of the wireless access network, the scrambled user 
terminal certificate including a user terminal public key which corresponds to a user terminal 
private key; 

disqualifying the first oortjon of the shared secret from use with symmetric key 
crvDtOCTaphv between the user terminal and the access point; 

generating an aufhenlicator string including data encrypted with the user terminal private 
key; and 

sending a message to the access point, the message including the scrambled user terminal 
certificate and the authenticator string. 
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2. (Original) The method of claim 1 , further comprising generating the shared secret and 
providing the shared secret to the access point 

3. (Previously presented) The method of claim 2, wherein providing the shared secret to the 
access point comprises encrypting the shared secret with an access point public key. 

4. (Currently Amended) The method of claim 1 , wherein scrambling the user terminal 
certificate using the first portion of the shared secret comprises combining the user terminal 
certificate with a pseudo-random sequence generated by a linear feedback shift register 

: initialized with the first portion apart of the shared secret. 

5. (Canceled). 

6- (Currently amended) The method of claim 1 [[5]], v^erein the remainiag[[der]] portion 
of the shared secret is used for symmetric key cryptography between the user terminal and the 
access point 

7. (Currently Amended) A user terminal comprising: 

a memory to store a user terminal private key and a user terminal certificate, the user 
teiminal certificate including a user terminal public key which corresponds to tiie user teraunal 
private key; 

a processor coupled to the memory to scramble the user terminal certificate using a first 
I portion of a shared secret to be known only by the user terminal and an access point of [[tihe]] a 
I wireless access network and to generate an authenticator string including data encrypted with the 
j user terminal private kcy^wfaerein the first port ion of the shared secret to be disqualified from 
j use with symmetric kev cryptograp hy between the user terminal and the access point: and 
, a transmitter coupled to the processor to send a message to the access point, the message 

including the scrambled user terminal certificate and the authenticator string. 

i 
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8. (Previously presented) The user teiminal of claim 7, wherein the processor also generates 
the shared secret and the transmitter also provides the shared secret to the access point 

9. (Previously presented) The user terminal of claim 8, wherein the transmitter provides the 
shared secret to Ihe access point by encrypting the shared secret with an access point public key. 

1 0. (Currently amended) The user tenninal of claim 7, wherein the processor scrambles the 
' user teraiinal certificate using the first portion of the shared secret by combining the user 

tenninal certificate with a pseudo-random sequence generated by a linear feedback shift register 
initialized with the first portion a^art of the shared secret 

1 1 . (Canceled), 

12. (Currently amended) The user terminal of claim 7 [[1 1]], wherein the remaining[[der]] 
portion of the shared secret to be [[is]] used for symmetric key ciyptography between the user 
terminal and the access point. 

13. (Cunrently Amended) A method perfoimed by an access point of a wireless access 
network, the method comprising: 

receiving a message ftom a user terminal of the wireless access network, the message 
containing a shared secret encrypted with an access point public key, an authenticator string 
including data encrypted with a user tenninal private key, and a user terminal certificate 
scrambled using the shared secret, the scrambled user terminal certificate including a user 
terminal public key which corresponds to the user terminal private key; 

decrypting the shared secret using an access point private key; 

unscrambling the user terminal certificate using a first portion gf the decrypted shared 
secret; [[and]] 
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disQualifving the first por rion of the decrypted shared secret froni use with symmetric key 
cryptog raphy between the user terminal and the access pomt: and 

decrypting the authenticator staring using the user terminal public key, 
1 4- (Currently Amended) The method of claim 13, wherein unscrambling the user terminal 
certificate using the first portion of the decrypted shared secret comprises combining the 
scrambled user terminal certificate with a pseudo-random sequence generated by a linear 
feedback shift register initialized with the first portion » part of the decrypted shared secret 

15. (Canceled). 

1 6. (Currently amended) The method of claim 13 [[1 5]], wherein the remaining[[der]] 
portion of the shared secret is used for symmetric key cryptography between the user teitninal 
and the access point. 

17. (Canceled). 

1 8. (Currently Amended) An access point comprising: 
a receiver to receive a message fttwn a user terminal, the message containing a shared 

secret encrypted with an access point public key, an authenticator string including data encrypted 
with a user terminal private key, and a user terminal certificate scrambled using flie shared 
secret, the user terminal certificate including a user terminal public key which corresponds to the 
user terminal private key; and 

a processor coupled to the receiver to decrypt the shared secret using an access point 
private key, unscramble the user terminal certificate using a first portion of the decrypted shared 
secret, and decrypt tiie authenticator string using the user terminal public ke y, wherein the first 
portion of the decrypted shared secret to be disqualified from use with symmetric key 
cryptograph y between the user terminal and the access point 
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1 9. (Currently Amended) The access point of claim 1 8, wherein the processor unscrambles 
the user teiminal certificate using thefirst portjon of the shared secret by combining the 
scrambled user terminal certificate with a pseudo-random sequence generated by a linear 
feedback shift register initialized with the first portion a^ajt of the decrypted shared secret. 

20, (Canceled). 

I 21 . (Currently amended) The access point of claim 18 [(20]], wherein the remaining[[der]] 
EQTtion of the shared secret is used for symmetric key cryptography between the user temiinal 
and the access point. 

22. (Canceled). 

23. (Currently Amended) A machine-readable medium storing data representing instractions 
that, when performed by a processor of a user terminal, causes the pzocessor to perfonn 

j 

operations comprising: 

scrambling a user terminal certificate using a first portion of a shared secret to be known 
only by the user tenninal and an access point of ([the]] a wireless access network, the scrambled 
user tenninal certificate including a user tenninal public key which corresponds to a user 
terminal private key, 

disqualifying the first portion of the shared secret from use with symmetric key 
cryptograp hy between the user teiminal and the access point 

I 

I generating an authenticator string including data encrypted with ttie tiser tenninal private 

key; and 

, sending a message to the access point, the message including the scrambled user terminal 

certificate atid the authenticator string. 

I • 

i 

I 
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24. (Original) The machine-readable medium of claim 23, wherein the instructions further 
cause the processor to p^orm operations comprising generating the shared secret and providing 
the shared secret to the access point 

25. (Previously presented) The machine-readable medium of claim 24, wherein providing the 
shared secret to the access point comprises encrypting the shared secret with an access pomt 
public key. 

26. (Currently amended) The machine-readable medium of claim 23, wherein scrambling the 
nsea: terminal certificate using the first portion of the shared secret comprises combining the user 
terminal certificate with a pseudo-random sequence generated by a linear feedback shift register 
initialized with arpafi the first portion of the shared secret 

27. (Canceled). 

28. (Currently amended) The machine-readable medium of claim 23 [[27]], wherein the 
remaining[[der]] portion of the shared secret is used for symmetric key cryptography between 
the user terminal and the access point 

29. (Currently Amended) A machine-readable medium storing data representing instructions 
that, when performed by a processor of an access point, causes the processor to perform 
operations comprising: 

receiving a message &Qm a user terminal of [[the]] a wireless access network, the 
message containing a shared secret encrypted with an access point public key, an authenticator 
string including data encrypted with a user termmal private key, and a user terminal certificate 
scrambled using a first portion of the shared secret, the scrambled user terminal certificate 
including a user terminal public key which corresponds to a user terminal private key; 

decrypting the shared secret using an access point private key; 
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unscrambling the iiser terminal certificate using the first portion of the decrypted shared 

secret; 

disqualifring the first portion of the decrypted shared secret from use with symmetric key 
cryptography between the user terminal and the access point: and 

decrypting the autfaenticator string using tiie user terminal public key. 

30. (Currently amended) The machine-readable mediimi of claim 29, wherein unscrambling 
the user terminal certificate using the first portion of the decrypted shared secret comprises 
combining the scrambled user temiinal certificate with a pseudo-random sequence generated by 
a linear feedback shift register initialized with a-paft the first portion of the decrypted shared 
secret 

31. (Canceled). 

32. (Currently amended) The machine-readable medium of claim 29 [[3 1 ]], wherein the 
iemaining[[der]] portion of the decrypted shared secret is used for symmetric key cryptography 
between the user terminal and the access point 

33. (Canceled). 

34. (New) An appamtus comprising: 
a memory to store a certificate; 

a processor coupled to the memory to scramble the certificate using a first portion of a 
shared secret to be known only by the apparatus and an access point of a wireless access 

I network, wherein the first portion of the shared secret to be disqualified from use with symmetric 

i 

key cryptography with tiie access point; and 

a transmitter coupled to the processor to send a message to the access point, the message 
I including tfie scrambled certificate. 
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35. (New) The apparatus of claim 34, wherein the processor also generates the shared secret 
and the transmitter also provides the shared secret to the access point 

36. (New) ITie apparatus of claim 35, wherein the transmitter provides the shared secret to 
the access point by encrypting the shared secret with an access point public key. 

37. (New) The apparatus of claim 34, wherein the processor scrambles the certificate using 
the first portion of the shared secret by combining the certificate with a pseudo-random sequence 
generated by a linear feedback shift register initialized with the first portion of the shared secret. 

38. (New) The apparatus of claim 34, wherein a second portion of the shared secret to be 
used for symmetric key cryptography with the access point. 

39. (New) An access point comprising: 

a receiver to receive a message, the message comprising a shared secret encrypted with 
an access point public key and a certificate scrambled using the shared secret; and 

a processor coupled to the receiver to decrypt the shared secret using an access point 
private key, and unscramble the certificate usixxg a first portion of the decrypted shared secret, 
wherein the first portion of the decrypted shared secret to be disqualified firom use with 
symmetric key cryptography with the access point. 

40. (New) The access point of claim 39, wherein the processor unscrambles tiie certificate 

! using the first portion of the shared secret by combining the scrambled certificate with a pseudo- 
random sequence generated by a linear feedback shift register initialized with the fu:st portion of 
the decrypted shared secret 

41 . (New) The access point of claim 39, wherein a second portion of the shared secret is used 

: for symmetric key cryptography with the access point. 

I 
I 
I 
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42. (New) The access point of claim 39, wherein the certificate includes an identification of a. 
sending apparatus and a sending apparatus public key which corresponds to a sending apparatus 
private key, wherein the access point authenticates the sending apparatus by checking the 
certificate. 
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